Route Origin Authorization

$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439313a3a2f34382d3438203d3e20323037363735.roa
File:                     326131313a323963303a336439313a3a2f34382d3438203d3e20323037363735.roa (raw, json)
Hash identifier:          CZ704THADAXWkdQmNX+EE1gHuQ8kKs9sANpdCsuP47s=
Subject key identifier:   25:46:40:AC:B9:22:AB:37:E0:F6:22:DC:79:B1:C8:1A:B4:2C:A6:E2
Certificate issuer:       /CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
Certificate serial:       10F29A058C2FBDDC199DEA34C05C32365D1C13B4
Authority key identifier: 87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
Subject info access:      rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439313a3a2f34382d3438203d3e20323037363735.roa
Signing time:             Tue 05 Aug 2025 22:39:57 +0000
ROA not before:           Tue 05 Aug 2025 22:34:57 +0000
ROA not after:            Tue 04 Aug 2026 22:39:57 +0000
asID:                     207675
IP address blocks:        2a11:29c0:3d91::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.crl
                          rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f2:9a:05:8c:2f:bd:dc:19:9d:ea:34:c0:5c:32:36:5d:1c:13:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8770188F7F0D18A86637EF0EE75EE2B70D810A7C
        Validity
            Not Before: Aug  5 22:34:57 2025 GMT
            Not After : Aug  4 22:39:57 2026 GMT
        Subject: CN=254640ACB922AB37E0F622DC79B1C81AB42CA6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:3a:10:3b:a5:d9:2c:56:7e:5c:55:55:4d:
                    6c:6e:15:32:94:21:10:15:73:23:05:cc:90:e3:c6:
                    49:87:66:61:9b:06:94:4e:31:58:64:78:b6:0e:e8:
                    b1:f2:3f:37:45:d7:e5:00:05:6e:50:40:d1:e3:bc:
                    5a:4a:76:95:ce:90:50:aa:6b:10:ef:31:d2:f3:5f:
                    35:8b:23:56:02:0c:41:b8:16:48:7f:ea:5d:4b:da:
                    05:ac:f6:23:ff:e1:d4:b3:37:4e:a9:31:af:ac:ff:
                    5a:ff:71:30:20:8a:f7:e8:34:b7:18:35:c1:d1:08:
                    2e:52:f5:fd:9f:eb:37:94:7c:45:b2:f0:ea:cf:fa:
                    91:53:f4:b3:9e:0e:9b:14:78:b4:77:1f:3a:b1:68:
                    2d:1d:f5:e1:bc:4b:fc:2f:06:50:8f:6f:35:ce:2c:
                    16:41:82:62:19:82:eb:dd:36:a4:fd:c8:f3:9f:71:
                    df:db:dd:c1:73:e0:8a:52:ac:16:15:3d:52:2d:a2:
                    c1:38:0b:d2:66:9a:67:82:69:c8:f6:c7:97:9b:42:
                    11:70:5e:e3:e3:94:41:e0:76:8b:5e:ff:c5:cc:c0:
                    36:bd:14:74:74:71:52:da:7c:e3:c5:7d:ac:bb:c9:
                    16:df:ee:59:92:66:8d:24:07:10:53:97:aa:78:cd:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:46:40:AC:B9:22:AB:37:E0:F6:22:DC:79:B1:C8:1A:B4:2C:A6:E2
            X509v3 Authority Key Identifier:
                keyid:87:70:18:8F:7F:0D:18:A8:66:37:EF:0E:E7:5E:E2:B7:0D:81:0A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/8770188F7F0D18A86637EF0EE75EE2B70D810A7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/3/326131313a323963303a336439313a3a2f34382d3438203d3e20323037363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:29c0:3d91::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:b8:a1:cc:3a:f3:40:a7:de:b8:35:25:9a:06:29:eb:d1:22:
         bb:53:53:b0:22:cd:5c:ea:27:97:94:2a:73:d5:db:56:a6:d2:
         55:18:8c:3a:3f:e9:a3:49:47:db:49:d2:3e:6f:ad:3f:9e:19:
         f1:f5:0c:22:67:ab:03:8e:62:63:1b:3a:24:00:6d:16:49:3c:
         85:2c:f0:1d:bb:77:57:ec:b2:36:05:ce:c9:2b:28:6f:3c:a4:
         29:d7:c3:ef:35:12:c2:81:2f:22:12:1c:cc:8a:e4:9a:db:90:
         d6:d6:d9:89:18:90:6e:07:05:c6:90:06:50:74:4f:df:94:0a:
         2f:3e:b5:f0:df:cd:89:cc:ec:c8:b1:d2:c7:a5:58:50:bd:91:
         f0:58:37:1e:87:ed:52:e0:c5:74:26:90:a4:bf:0b:b2:ec:78:
         9b:e3:c9:c1:90:4a:67:65:24:98:0f:a5:a2:67:39:39:8b:97:
         1d:a4:1a:b4:2f:e0:2a:ed:93:1e:a0:c1:42:27:79:e5:48:3b:
         a8:c4:9f:1a:c2:7b:ef:32:1a:d9:5b:24:f6:8e:a3:b8:66:4f:
         f9:96:d0:f6:fb:59:a3:4c:d7:47:60:d4:50:1a:d6:f0:6d:62:
         66:42:44:23:c0:f8:97:33:07:eb:e2:fd:d7:59:3e:ed:c9:34:
         0d:af:97:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:22:41 2025 by rpki-client